Fuzz blockers

The followings are the branches where fuzzer fails to bypass.

Unique Reachable Functions	All non-covered Complexity	All Reachable Complexity	Function Name	Function Callsite	Blocked Branch
None	32	609	nghttp2_hd_inflate_hd_nv	call site: 00269	/src/nghttp2/lib/nghttp2_hd.c:1934
None	25	25	bufs_ensure_addb	call site: 00165	/src/nghttp2/lib/nghttp2_buf.c:369
None	0	274	nghttp2_hd_deflate_hd_bufs	call site: 00035	/src/nghttp2/lib/nghttp2_hd.c:1460
None	0	248	deflate_nv	call site: 00131	/src/nghttp2/lib/nghttp2_hd.c:1421
None	0	96	nghttp2_hd_huff_encode	call site: 00172	/src/nghttp2/lib/nghttp2_hd_huffman.c:64
None	0	18	frame_pack_headers_shared	call site: 00190	/src/nghttp2/lib/nghttp2_frame.c:321
None	0	15	nghttp2_frame_pack_headers	call site: 00035	/src/nghttp2/lib/nghttp2_frame.c:389
None	0	8	hd_ringbuf_reserve	call site: 00152	/src/nghttp2/lib/nghttp2_hd.c:632
None	0	6	nghttp2_nv_array_copy	call site: 00306	/src/nghttp2/lib/nghttp2_frame.c:1072
None	0	6	nghttp2_nv_array_copy	call site: 00307	/src/nghttp2/lib/nghttp2_frame.c:1086
None	0	2	nghttp2_frame_headers_init	call site: 00029	/src/nghttp2/lib/nghttp2_frame.c:72
None	0	2	nghttp2_frame_unpack_headers_payload	call site: 00203	/src/nghttp2/lib/nghttp2_frame.c:423

Fuzzer calltree


         LLVMFuzzerTestOneInput

[function] [call site] 00000


           check_frame_pack_headers

[function] [call site] 00001


             nghttp2_mem_default

[function] [call site] 00002


             frame_pack_bufs_init

[function] [call site] 00003


               nghttp2_mem_default

[function] [call site] 00004


               nghttp2_bufs_init2

[function] [call site] 00005


                 nghttp2_bufs_init3

[function] [call site] 00006


                   buf_chain_new

[function] [call site] 00007


                     nghttp2_mem_malloc

[function] [call site] 00008


                     nghttp2_buf_init2

[function] [call site] 00009


                       nghttp2_buf_init

[function] [call site] 00010


                       nghttp2_buf_reserve

[function] [call site] 00011


                         nghttp2_max_size

[function] [call site] 00012


                         nghttp2_mem_realloc

[function] [call site] 00013


                     nghttp2_mem_free

[function] [call site] 00014


             nva_out_init

[function] [call site] 00015


             nghttp2_hd_deflate_init

[function] [call site] 00016


               nghttp2_hd_deflate_init2

[function] [call site] 00017


                 hd_context_init

[function] [call site] 00018


                   hd_ringbuf_init

[function] [call site] 00019


                     nghttp2_mem_malloc

[function] [call site] 00020


                 hd_map_init

[function] [call site] 00021


             nghttp2_hd_inflate_init

[function] [call site] 00022


               hd_context_init

[function] [call site] 00023


               nghttp2_buf_init

[function] [call site] 00024


               nghttp2_buf_init

[function] [call site] 00025


             fuzz_make_nv(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >)

[function] [call site] 00026


             nghttp2_priority_spec_default_init

[function] [call site] 00027


             nghttp2_frame_headers_init

[function] [call site] 00028


               nghttp2_frame_hd_init

[function] [call site] 00029


               nghttp2_priority_spec_default_init

[function] [call site] 00030


             nghttp2_frame_pack_headers

[function] [call site] 00031


               __assert_fail

[call site] 00032


               nghttp2_frame_headers_payload_nv_offset

[function] [call site] 00033


                 nghttp2_frame_priority_len

[function] [call site] 00034


               nghttp2_hd_deflate_hd_bufs

[function] [call site] 00035


                 emit_table_size

[function] [call site] 00036


                   count_encoded_length

[function] [call site] 00037


                   encode_length

[function] [call site] 00038


                   nghttp2_bufs_add

[function] [call site] 00039


                     nghttp2_min_size

[function] [call site] 00040


                     bufs_alloc_chain

[function] [call site] 00041


                       buf_chain_new

[function] [call site] 00042


                     nghttp2_cpymem

[function] [call site] 00043


                 emit_table_size

[function] [call site] 00044


                 deflate_nv

[function] [call site] 00045


                   lookup_token

[function] [call site] 00046


                     memeq

[function] [call site] 00047


                       memcmp

[call site] 00048


                     memeq

[function] [call site] 00049


                     memeq

[function] [call site] 00050


                     memeq

[function] [call site] 00051


                     memeq

[function] [call site] 00052


                     memeq

[function] [call site] 00053


                     memeq

[function] [call site] 00054


                     memeq

[function] [call site] 00055


                     memeq

[function] [call site] 00056


                     memeq

[function] [call site] 00057


                     memeq

[function] [call site] 00058


                     memeq

[function] [call site] 00059


                     memeq

[function] [call site] 00060


                     memeq

[function] [call site] 00061


                     memeq

[function] [call site] 00062


                     memeq

[function] [call site] 00063


                     memeq

[function] [call site] 00064


                     memeq

[function] [call site] 00065


                     memeq

[function] [call site] 00066


                     memeq

[function] [call site] 00067


                     memeq

[function] [call site] 00068


                     memeq

[function] [call site] 00069


                     memeq

[function] [call site] 00070


                     memeq

[function] [call site] 00071


                     memeq

[function] [call site] 00072


                     memeq

[function] [call site] 00073


                     memeq

[function] [call site] 00074


                     memeq

[function] [call site] 00075


                     memeq

[function] [call site] 00076


                     memeq

[function] [call site] 00077


                     memeq

[function] [call site] 00078


                     memeq

[function] [call site] 00079


                     memeq

[function] [call site] 00080


                     memeq

[function] [call site] 00081


                     memeq

[function] [call site] 00082


                     memeq

[function] [call site] 00083


                     memeq

[function] [call site] 00084


                     memeq

[function] [call site] 00085


                     memeq

[function] [call site] 00086


                     memeq

[function] [call site] 00087


                     memeq

[function] [call site] 00088


                     memeq

[function] [call site] 00089


                     memeq

[function] [call site] 00090


                     memeq

[function] [call site] 00091


                     memeq

[function] [call site] 00092


                     memeq

[function] [call site] 00093


                     memeq

[function] [call site] 00094


                     memeq

[function] [call site] 00095


                     memeq

[function] [call site] 00096


                     memeq

[function] [call site] 00097


                     memeq

[function] [call site] 00098


                     memeq

[function] [call site] 00099


                     memeq

[function] [call site] 00100


                     memeq

[function] [call site] 00101


                     memeq

[function] [call site] 00102


                     memeq

[function] [call site] 00103


                     memeq

[function] [call site] 00104


                     memeq

[function] [call site] 00105


                     memeq

[function] [call site] 00106


                   name_hash

[function] [call site] 00107


                   hd_deflate_decide_indexing

[function] [call site] 00108


                     entry_room

[function] [call site] 00109


                   search_hd_table

[function] [call site] 00110


                     hd_map_find

[function] [call site] 00111


                       name_eq

[function] [call site] 00112


                         memeq

[function] [call site] 00113


                       value_eq

[function] [call site] 00114


                         memeq

[function] [call site] 00115


                     search_static_table

[function] [call site] 00116


                       memcmp

[call site] 00117


                   emit_indexed_block

[function] [call site] 00118


                     count_encoded_length

[function] [call site] 00119


                     encode_length

[function] [call site] 00120


                     nghttp2_bufs_add

[function] [call site] 00121


                   nghttp2_hd_table_get

[function] [call site] 00122


                     __assert_fail

[call site] 00123


                     hd_ringbuf_get

[function] [call site] 00124


                       __assert_fail

[call site] 00125


                   nghttp2_rcbuf_incref

[function] [call site] 00126


                   nghttp2_rcbuf_new2

[function] [call site] 00127


                     nghttp2_rcbuf_new

[function] [call site] 00128


                       nghttp2_mem_malloc

[function] [call site] 00129


                     nghttp2_cpymem

[function] [call site] 00130


                   nghttp2_rcbuf_new2

[function] [call site] 00131


                   nghttp2_rcbuf_decref

[function] [call site] 00132


                     __assert_fail

[call site] 00133


                     nghttp2_rcbuf_del

[function] [call site] 00134


                       nghttp2_mem_free2

[function] [call site] 00135


                   add_hd_table_incremental

[function] [call site] 00136


                     entry_room

[function] [call site] 00137


                     hd_ringbuf_get

[function] [call site] 00138


                     entry_room

[function] [call site] 00139


                     hd_ringbuf_pop_back

[function] [call site] 00140


                       __assert_fail

[call site] 00141


                     hd_map_remove

[function] [call site] 00142


                     nghttp2_hd_entry_free

[function] [call site] 00143


                       nghttp2_rcbuf_decref

[function] [call site] 00144


                       nghttp2_rcbuf_decref

[function] [call site] 00145


                     nghttp2_mem_free

[function] [call site] 00146


                     nghttp2_mem_malloc

[function] [call site] 00147


                     nghttp2_hd_entry_init

[function] [call site] 00148


                       nghttp2_rcbuf_incref

[function] [call site] 00149


                       nghttp2_rcbuf_incref

[function] [call site] 00150


                     hd_ringbuf_push_front

[function] [call site] 00151


                       hd_ringbuf_reserve

[function] [call site] 00152


                         nghttp2_mem_malloc

[function] [call site] 00153


                         hd_ringbuf_get

[function] [call site] 00154


                         nghttp2_mem_free

[function] [call site] 00155


                     nghttp2_hd_entry_free

[function] [call site] 00156


                     nghttp2_mem_free

[function] [call site] 00157


                     hd_map_insert

[function] [call site] 00158


                   nghttp2_rcbuf_decref

[function] [call site] 00159


                   nghttp2_rcbuf_decref

[function] [call site] 00160


                   emit_newname_block

[function] [call site] 00161


                     pack_first_byte

[function] [call site] 00162


                       __assert_fail

[call site] 00163


                     nghttp2_bufs_addb

[function] [call site] 00164


                       bufs_ensure_addb

[function] [call site] 00165


                         bufs_alloc_chain

[function] [call site] 00166


                     emit_string

[function] [call site] 00167


                       nghttp2_hd_huff_encode_count

[function] [call site] 00168


                       count_encoded_length

[function] [call site] 00169


                       encode_length

[function] [call site] 00170


                       nghttp2_bufs_add

[function] [call site] 00171


                       nghttp2_hd_huff_encode

[function] [call site] 00172


                         __bswap_32

[function] [call site] 00173


                         nghttp2_bufs_addb

[function] [call site] 00174


                         nghttp2_bufs_addb

[function] [call site] 00175


                         nghttp2_bufs_addb

[function] [call site] 00176


                       __assert_fail

[call site] 00177


                       nghttp2_bufs_add

[function] [call site] 00178


                     emit_string

[function] [call site] 00179


                   emit_indname_block

[function] [call site] 00180


                     count_encoded_length

[function] [call site] 00181


                     pack_first_byte

[function] [call site] 00182


                     encode_length

[function] [call site] 00183


                     nghttp2_bufs_add

[function] [call site] 00184


                     emit_string

[function] [call site] 00185


               nghttp2_frame_pack_priority_spec

[function] [call site] 00186


                 nghttp2_put_uint32be

[function] [call site] 00187


                   __bswap_32

[function] [call site] 00188


               nghttp2_bufs_len

[function] [call site] 00189


               frame_pack_headers_shared

[function] [call site] 00190


                 nghttp2_frame_pack_frame_hd

[function] [call site] 00191


                   nghttp2_put_uint32be

[function] [call site] 00192


                   nghttp2_put_uint32be

[function] [call site] 00193


                 nghttp2_frame_pack_frame_hd

[function] [call site] 00194


                 nghttp2_frame_pack_frame_hd

[function] [call site] 00195


             unpack_framebuf

[function] [call site] 00196


               unpack_frame

[function] [call site] 00197


                 nghttp2_mem_default

[function] [call site] 00198


                 nghttp2_frame_unpack_frame_hd

[function] [call site] 00199


                   nghttp2_get_uint32

[function] [call site] 00200


                     __bswap_32

[function] [call site] 00201


                   nghttp2_get_uint32

[function] [call site] 00202


                 nghttp2_frame_unpack_headers_payload

[function] [call site] 00203


                   nghttp2_frame_unpack_priority_spec

[function] [call site] 00204


                     nghttp2_get_uint32

[function] [call site] 00205


                     nghttp2_priority_spec_init

[function] [call site] 00206


                   nghttp2_priority_spec_default_init

[function] [call site] 00207


                 nghttp2_frame_unpack_priority_payload

[function] [call site] 00208


                   nghttp2_frame_unpack_priority_spec

[function] [call site] 00209


                 nghttp2_frame_unpack_rst_stream_payload

[function] [call site] 00210


                   nghttp2_get_uint32

[function] [call site] 00211


                 nghttp2_frame_unpack_settings_payload2

[function] [call site] 00212


                   nghttp2_mem_malloc

[function] [call site] 00213


                   nghttp2_frame_unpack_settings_entry

[function] [call site] 00214


                     nghttp2_get_uint16

[function] [call site] 00215


                       __bswap_16

[function] [call site] 00216


                     nghttp2_get_uint32

[function] [call site] 00217


                 nghttp2_frame_unpack_push_promise_payload

[function] [call site] 00218


                   nghttp2_get_uint32

[function] [call site] 00219


                 nghttp2_frame_unpack_ping_payload

[function] [call site] 00220


                 nghttp2_frame_unpack_goaway_payload2

[function] [call site] 00221


                   nghttp2_mem_malloc

[function] [call site] 00222


                   nghttp2_frame_unpack_goaway_payload

[function] [call site] 00223


                     nghttp2_get_uint32

[function] [call site] 00224


                     nghttp2_get_uint32

[function] [call site] 00225


                 nghttp2_frame_unpack_window_update_payload

[function] [call site] 00226


                   nghttp2_get_uint32

[function] [call site] 00227


                 __assert_fail

[call site] 00228


                 nghttp2_frame_unpack_altsvc_payload2

[function] [call site] 00229


                   nghttp2_get_uint16

[function] [call site] 00230


                   nghttp2_mem_malloc

[function] [call site] 00231


                   nghttp2_cpymem

[function] [call site] 00232


                   nghttp2_frame_unpack_altsvc_payload

[function] [call site] 00233


                 nghttp2_frame_unpack_origin_payload

[function] [call site] 00234


                   nghttp2_get_uint16

[function] [call site] 00235


                   nghttp2_mem_malloc

[function] [call site] 00236


                   nghttp2_get_uint16

[function] [call site] 00237


                   nghttp2_cpymem

[function] [call site] 00238


                 __assert_fail

[call site] 00239


                 nghttp2_frame_unpack_priority_update_payload

[function] [call site] 00240


                   __assert_fail

[call site] 00241


                   nghttp2_get_uint32

[function] [call site] 00242


                 __assert_fail

[call site] 00243


             inflate_hd

[function] [call site] 00244


               nghttp2_min_size

[function] [call site] 00245


               nghttp2_hd_inflate_hd3

[function] [call site] 00246


                 nghttp2_hd_inflate_hd_nv

[function] [call site] 00247


                   hd_inflate_keep_free

[function] [call site] 00248


                     nghttp2_rcbuf_decref

[function] [call site] 00249


                     nghttp2_rcbuf_decref

[function] [call site] 00250


                   nghttp2_min_size

[function] [call site] 00251


                   hd_inflate_read_len

[function] [call site] 00252


                     decode_length

[function] [call site] 00253


                   hd_context_shrink_table_size

[function] [call site] 00254


                     hd_ringbuf_get

[function] [call site] 00255


                     entry_room

[function] [call site] 00256


                     hd_ringbuf_pop_back

[function] [call site] 00257


                     hd_map_remove

[function] [call site] 00258


                     nghttp2_hd_entry_free

[function] [call site] 00259


                     nghttp2_mem_free

[function] [call site] 00260


                   get_max_index

[function] [call site] 00261


                   hd_inflate_read_len

[function] [call site] 00262


                   hd_inflate_commit_indexed

[function] [call site] 00263


                     nghttp2_hd_table_get

[function] [call site] 00264


                     emit_header

[function] [call site] 00265


                   hd_inflate_set_huffman_encoded

[function] [call site] 00266


                   hd_inflate_read_len

[function] [call site] 00267


                   nghttp2_hd_huff_decode_context_init

[function] [call site] 00268


                   nghttp2_rcbuf_new

[function] [call site] 00269


                   nghttp2_buf_wrap_init

[function] [call site] 00270


                   hd_inflate_read_huff

[function] [call site] 00271


                     nghttp2_hd_huff_decode

[function] [call site] 00272


                     nghttp2_hd_huff_decode_failure_state

[function] [call site] 00273


                   hd_inflate_read

[function] [call site] 00274


                     nghttp2_min_size

[function] [call site] 00275


                     nghttp2_cpymem

[function] [call site] 00276


                   hd_inflate_set_huffman_encoded

[function] [call site] 00277


                   hd_inflate_read_len

[function] [call site] 00278


                   nghttp2_hd_huff_decode_context_init

[function] [call site] 00279


                   nghttp2_buf_wrap_init

[function] [call site] 00280


                   hd_inflate_read_huff

[function] [call site] 00281


                   hd_inflate_commit_newname

[function] [call site] 00282


                     lookup_token

[function] [call site] 00283


                     add_hd_table_incremental

[function] [call site] 00284


                     emit_header

[function] [call site] 00285


                   hd_inflate_commit_indname

[function] [call site] 00286


                     nghttp2_hd_table_get

[function] [call site] 00287


                     nghttp2_rcbuf_incref

[function] [call site] 00288


                     add_hd_table_incremental

[function] [call site] 00289


                     nghttp2_rcbuf_decref

[function] [call site] 00290


                     emit_header

[function] [call site] 00291


                   hd_inflate_read

[function] [call site] 00292


                   hd_inflate_commit_newname

[function] [call site] 00293


                   hd_inflate_commit_indname

[function] [call site] 00294


               add_out

[function] [call site] 00295


               nghttp2_hd_inflate_end_headers

[function] [call site] 00296


                 hd_inflate_keep_free

[function] [call site] 00297


             nva_out_reset

[function] [call site] 00298


             nghttp2_bufs_reset

[function] [call site] 00299


               nghttp2_buf_reset

[function] [call site] 00300


               buf_chain_del

[function] [call site] 00301


                 nghttp2_buf_free

[function] [call site] 00302


                   nghttp2_mem_free

[function] [call site] 00303


                 nghttp2_mem_free

[function] [call site] 00304


             nghttp2_nv_array_copy

[function] [call site] 00305


               nghttp2_mem_malloc

[function] [call site] 00306


               nghttp2_downcase

[function] [call site] 00307


             nghttp2_nv_array_del

[function] [call site] 00308


               nghttp2_mem_free

[function] [call site] 00309


             fuzz_free_nv(nghttp2_nv*)

[function] [call site] 00310


             nghttp2_bufs_free

[function] [call site] 00311


               buf_chain_del

[function] [call site] 00312


             nghttp2_frame_headers_free

[function] [call site] 00313


               nghttp2_nv_array_del

[function] [call site] 00314


             nghttp2_hd_inflate_free

[function] [call site] 00315


               hd_inflate_keep_free

[function] [call site] 00316


               nghttp2_rcbuf_decref

[function] [call site] 00317


               nghttp2_rcbuf_decref

[function] [call site] 00318


               hd_context_free

[function] [call site] 00319


                 hd_ringbuf_free

[function] [call site] 00320


                   hd_ringbuf_get

[function] [call site] 00321


                   nghttp2_hd_entry_free

[function] [call site] 00322


                   nghttp2_mem_free

[function] [call site] 00323


                   nghttp2_mem_free

[function] [call site] 00324


             nghttp2_hd_deflate_free

[function] [call site] 00325


               hd_context_free

[function] [call site] 00326


           check_frame_push_promise

[function] [call site] 00327


             nghttp2_mem_default

[function] [call site] 00328


             frame_pack_bufs_init

[function] [call site] 00329


             nva_out_init

[function] [call site] 00330


             nghttp2_hd_deflate_init

[function] [call site] 00331


             nghttp2_hd_inflate_init

[function] [call site] 00332


             fuzz_make_nv(std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >, std::__1::basic_string<char, std::__1::char_traits<char>, std::__1::allocator<char> >)

[function] [call site] 00333


             nghttp2_priority_spec_default_init

[function] [call site] 00334


             nghttp2_frame_push_promise_init

[function] [call site] 00335


               nghttp2_frame_hd_init

[function] [call site] 00336


             nghttp2_frame_pack_push_promise

[function] [call site] 00337


               __assert_fail

[call site] 00338


               nghttp2_hd_deflate_hd_bufs

[function] [call site] 00339


               nghttp2_put_uint32be

[function] [call site] 00340


               nghttp2_bufs_len

[function] [call site] 00341


               frame_pack_headers_shared

[function] [call site] 00342


             unpack_framebuf

[function] [call site] 00343


             nghttp2_nv_array_copy

[function] [call site] 00344


             nghttp2_nv_array_del

[function] [call site] 00345


             fuzz_free_nv(nghttp2_nv*)

[function] [call site] 00346


             nghttp2_bufs_reset

[function] [call site] 00347


             nghttp2_bufs_free

[function] [call site] 00348


             nghttp2_frame_push_promise_free

[function] [call site] 00349


               nghttp2_nv_array_del

[function] [call site] 00350


             nghttp2_hd_inflate_free

[function] [call site] 00351


             nghttp2_hd_deflate_free

[function] [call site] 00352